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Amendments to the Claims .' 
This listing of claims replaces all prior versions and listings of claims in the application: 

1 . (Currently Amended) A method by which more than one client program connected to 
a network stores the same data item at the same location or locations in a data repository 
connected to the network, the method comprising: 

having a first client program depositing a data item in a the data repository for a 
depositing client program, the depositing including 

determining a digital fingerprint from the data item using a 
roproduciblo pcoudorandom process hash function that produces digital fingerprints having a 
pseudorandom distribution; 

otoring tho data itom in tho data ropocitory at a physical location or locations 
asaociatod with tho digital fingorprint, 

having a fisoond oliontprogram initiat e a prooocs for depositing a cooond data itom in tho 
' data r e pository, the prooooc includin g 

dotonnining a digital fingoiprint from th e pocond data itom using tho 
Fe produciblo pcoudorandom proooss ■ 

comparing the determined digital fingerprint from the s e cond deposited data item to 
digital fingerprints fe* of data items already stored in the data repositoryraad; 

determining from the comparing of digital fingerprints, without comparing the entire 
contents of the s e ooa d deposited data item to the entire contents of a data item already stored, 
whether a stored data item is identical to the secon4 deposited data item is already stored in tho 
d ata r e pository ; and 
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storing the s e cond deposited data item in the data repository if comparing establishes that 
fr data it e m idontical to tho s e cond data it e m io not alr e ady stor e d in tho data repository there is 
no match, and not storing the cooond deposited data item in the data repository if comparing 
establishes that a data itom idontioal to tho sooond data itom is akoady ctorod in tho data 
Fe positoF V a match is found: 

associating the deposite d data item with a named obiect the associating including 

associating the deposited data item with an access authorization credential which is 
associated with the depositing client program: 

associating the access authorization credential with the named object which comprises 
the determined fingerprint; and 

storing the named obiect in a database: 

retrieving the stored dat a item, in response to a request bv a retrieving client program, 
the retrieving including 

using the access authorization credential to select the stored named obiect; 
retrieving the stored named obiect from the database: and 

using the determine fingerprint from the retrieved named object to return the stored data 

, item. 

wh e r e in - t h e reproducible ■ psoudorandom proc e ss produces a digital fing e rprint dosignod 
to probabilistically guarantee to provido a unique digital fingerprint for ovary distinct data itom 
ee nt to th e data repository; 

wherein the physical location or locations at which the deposited data items-a*^ is stored 
in the data repository are determined at least ih part by the determined digital fingerprints. 

2-3. (Canceled). 

4. (Currently Amended) The method of claim 154 wherein the encrypting of the 
deposited data item is performed by the depositing client program prior to transmitting th e 
deposited data itom to th e data r e posito r y. 
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5. (Previously Presented) The method of claim 4 further comprising encrypting the key 
and storing the encrypted key in the data repository. 

6. (Currently Amended) The method of claim 5 wherein a client or user specific key is 
used to encrypt the key derived from the content of the deposited data item. 

7. (Currently Amended) The method of claim 154 wherein a plurality of client programs 
each deposit the same deposited data item and the key derived from the content of the deposited 
data item is the same for each depositing fnr nil iWtnnnnn nf «.„ j tcm :t0r o d ^ ^ 
r e pository, 

8. (Currently Amended) The method of claim 154 wherein users of the method are 
grouped into families, and the key derived from the content of the data item is the same for all 
instanooo depositing of the deposited data item jtorod in tho repository by client programs ar.tinp 
on behalf of users in the same family, but may be different for users in different families. 

9. (Currently Amended) The methodof claim 1 wherein one or more additional copies or 
, other forms of redundant information about the deposited data items & are. stored in the data 

repository for data integrity, availability, or accessibility purposes and not to provide separate 
storage of the deposited data item for different client programs. 

10. (Currently Amended) The method of claim 1 further comprising accociating tho data 
i tem with oaoh of a plurality of ocoooo authorization orodontials, each of which in uniquo l y 

' aosooiatod with a particular uoor or cliont progam. -w herein a plurality of client pro^ ram^ ^ 
deposit the deposited data item and t he deposited data item is associated with a plurality of 
named objects. 

11. (Canceled). 
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12. (Currently Amended) Th e m e thod of claim 10 whoroin tho associating of tho data 
item with oash of a plurality of acoenn nnthnnVitinTi rrnrirmtinir ™ mFr j D( , c storing a-plunlity of 
namod objooto, oaoh nomod obj e ct oompriGinfi information roprocontativo of tho data itom pairod 
with information r e presentative of ono of tho acoooo - authoriaation oredontialG . . The method of 
claim 1 wherein the stored name d object is identified by information representative of the access 
authorization credential. 

13. (Canceled). 

14. (Original) The method of claim 12 wherein the information representative of the 
access-authorization credential is a cryptographic hash of all or part of the access-authorization 
credential, 

15. (Original) The method of claim 14 wherein the cryptographic hash is an access 
identifier that uniquely identifies the data item for a particular user or client program. 

16. (Currently Amended) The method of claim 13- wherein the named object is a data 
structure created by the client program. 

1 7. (Currently Amended) The method of claim 12 wherein the named object is a data 
structure created by a server program acting on behalf of the repository. 

18. (Currently Amended) The method of claim 12 further comprising a the depositing 
client replacing an ojucting v e rsion of a the stored named object with a new version of that 

- namod object, by replacing tho oxicting association with a data item otorod - in tho data repository 
with a now association in which the determined fingerprint is replaced by a new fingerprint . 

19. (Canceled). 
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20. (Currently Amended) The method of claim IS wherein the stored named objects 
further comprises historical version information associating different data items deposited at 
different times with different vorciono oftho named object versions, with the most recently 
created version being the current version. 

21. (Previously Presented) The method of claim 20 wherein a backup of data items 
stored in the data repository is accomplished by preserving copies of the current versions of 
named objects in existence at the time of the backup. 

22. (Currently Amended) The method of claim 1 wherein r-ftfords orokopt oftho 
aGoooiationbotwoon data items andnnmoc in nrrinrtn rinfirm x\im\^\ nbjocto, andivhoroin data 
items rooordod as b e ing associated with data items that are associated with objects are 
not deleted from the repository, and wherein named objects are backed up by preserving copies 
of the named objects stored in the database rocordo in oxictonoo at the time of the backup. 

23. (Original) The method of claim 21 or 22 wherein a plurality of backups are made at 
spaced time intervals. 



24. (Currently Amended) The method of claim 21 or 22 wherein the backup is 
accomplished by d e olaring that oftor a proscrib e d momont in timo a now vorcion of oaoh named 
object will b e oroatod tho firot timo that a now data - item io ossooktod with it retaining named 
object versions for named objects th at were the current version at a prescribed momen t in tin™ 
and creating new object versions for nam ed objects that are associated with new data items after 
the prescribed moment . 

25. (Original) The method of claim 24 wherein the prescribed moment in time is 
determined separately for each named object. 
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, 26. (Currently Amended) The method of claim 22 wherein named objects are preserved 

by creating a new version of each of a plurality of named objects each time that a new data item 
is associated with it. 

27. (Original) The method of claim 26, wherein versions of named objects that are 
deemed unnecessary are deleted. 

28. (Original) The method of claim 27, wherein the determination of which versions of a 
named object to delete is based in whole or in part on the times at which the versions were 
created, and the intervals between these times. 

29. (Currently Amended) The method of claim 20 further comprising preparing a digital 
time stamp hash for each o f a plurality of named objects to allow a property the existence and 
content of these named objects at a point in time to be proven at a later date. 

30. (Currently Amended) The method of claim 29 wherein a random or other difficult to 
guess element is incorporated into the digital, time stamp hash for each of the plurality of named 

, objects, to prevent the prop e rty existence or content from being proven if this element is deleted. 

3 1 . (Currently Amended) The method of claim 12 further comprising determining that a 
the stored d ata item stored in th e data repository is not r e fersncod bv associated with any named 
obj ect, and reusing the storage space used to store tho unr e fer e nc ed bv the stored data item. 

* 

32. (Currently Amended) The method of claim IS further comprising altering one or 
more properties or parameters associated with aa the access-authorization credential to change 
the access rights of a client or user to the deposited data item r e ferenc e d by that crodontial . 
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33. (Currently Amended) The method of claim 1 further comprising a challenge step to 
ascertain that ft the depositing client program has the fell entirety of the data item beinft 
deposited . 

34. (Currently Amended) The method of claim 33 wherein the challenge step comprises 
requiring that the depositing client program attempting to storo a data itom provide correct 
answers to inquiries as to the content of portions of the data item being deposited, or inquiries 
that require knowledge of this content. 

35. (Original) The method of claim 34 wherein the data item content on which the 
challenge is based is selected with a degree of randomness. 

36. (Currently Amended) The methotf of claim 1 wherein a plurality of depositors use a 
, Plurality of depositing client programs to store data items in the repository, and at least some of 

the plurality of depositors are retired to provide user identification, 

37. (Currently Amended) The method of claim 36 wherein rules for when a depositor 
must provide us®[ identification are selected in order to discourage unlawful distribution of 
access to th e data itom a proprietary data itenl stored in the data repository . 

38. (Currently Amended) The method of claim 37 wherein there is a greater degree of 
user identification or a higher likelihood that user identification will be required when the 
proprietary data item being stored deposited by the depositor has been indicated to be charoable 
wife retrievable bv a plurality of data repository users. 

4 

( 

39. (Currently Amended) The method of claim 37 wherein the proprietary for a class of 
data items fetHtos may only be sfaafed- retrieved bv users other than the depositor if thp. 
depositor has provided adequate user identification. 
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40. (Currently Amended) The method of claim 3 S or39 - 1 wherein identity information 
about tho dopooitor a data repository user associat ed with the depositing client p mpmrn ™ made 
available to anyono ablo to accooa tho data itom the retrievine client program, to discourage 
unlawful sharing of proprietary information. 



41. (Currently Amended) The method of claim 40 wherein the identity information is 
stored in an encrypted form that a plurality of retrieving client programs provided with the acce^ 
authorization credential can all read, and n o client program without th ? access authorising 
credential can read, tri w Hnpn-itnr ™d ..r„m mi^nqnp nfl y nrrn . . t n n ^^fl data ^ C3n Dot!l 



42. (Currently Amended) The method of claim 41 wherein, without the access 
authorisation credential, it th e ropooitory is riot afek possible to decrypt the identity information 
about tho depooitor . 

43 . (Currently Amended) The method of claim 37 wherein the identity of some users 
depositors has not been well verified, bat and restrictions are placed on sharing of data items 
deposited by such poorly unverified users. 

44. (Currently Amended) The method of claim 43 further comprising limiting access to 
data items deposited by an poorly unverified user. 

45. (Original) The method of claim 44 wherein the limited access is provided by limiting 
the aggregate bandwidth provided for such accesses. 

46. (Original) The method of claim 44 wherein the limited access is provided by limiting 
the number of simultaneous accesses to the data items. 
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47. (Currently Amended) The method of claim 1 wherein the depositing client program 
has a directory structure for &e a plurality^ data items, the data items arc directory structure is 
stored in the date repository, and the directory structure is not ovidont to maintainoro of tho 
fepesteay cannot be discerned bv examini ng data within the data rep osito ry without knowledge, 
of associated access authorization credentials. 

48. (Currently Amended) The method of claim 1 wherein the deposit client program 
using tho ropocitoi y runs on a client machine and is a mirroring program which ddermines 
which data items to deposit in the data repository, and wherein that determination is based at 
least in part on the result of a comparison of digital fingerprints establishing that certain data 
items are not already stored in the data repository. 

49. (Currently Amended) The method of claim 48 wherein mirroring software is 
downloaded to the client machine using a bootstrap process, wherein a small bootstrap program 
is downloaded and executed, and the bootstrap program manages download and installation of a 
further portion of the mirroring software. 

50. (Currently Amended) The method of claim 48 wherein the default for deciding what 
data items to mirror is to mirror all or substantially all data item residing on the client machine. 

5 1 . (Currently Amended) The method of claim 48 wherein the mirroring comprises 
making a detennination of which data items needs to be transmitted to the repository, and 
wherein that determination is based primarily on a comparison of digital fingerprints for data 
items at the client machine and data items in the repository. 



PAGE 11/19 * RCVDAT 7/31/2006 10:35:45 AM [Eastern Daylight Time] " SVR:USPTO-EFXRF-2/10 * DNIS:2734040* CSID:6175428906 1 DURATION (mifr$s):05-08 



JUL. 31. 2006 10:43AM (3) FISH & RICHARDSON 6175428906 NO. 2325 P. 12 

Applicant : Norman MargolusetaL Attorney's Docket No.: 11656-002001 

Serial No. : 09/785,535 

Filed : February 16, 2001 

Page : 11 of 18 



52. (Currently Amended) The method of claim 1© wherein the access-authorization 
credential is determined in part by computing a hash involving elements of the pathname for a 
file on fee a client computer on which the depositing client prog ram nins 

53. (Currently Amended) The method of claim 52 wherein the path name hash is made 
unique to a the depositing client program by introducing a reproducible but randomly chosen 
element into it. 

54. (Currently Amended) The method of claim 1% wherein a dat a - item string of bvtes is 
represented as a composite data item co mprising a plurality of component data-items, and each 
of the plurality of component data-items a*eis separately deposited in the repository and the 
entire plur ality is associated with the stored named object. 

55. (Currently Amended) The method of claim 54 wherein a lists of fingerprints for data- 
items making up a composite data-item are deposited as an index data item, which can be given 
aa associated with a named object-same and used for obtaining access to any of the component 
data-items. 

56. (Currently Amended) The method of claim 55 wherein a proof-of-deposit is returned 
for oaoh componont fee deposit of each of the plurality of component data items and some or all 
of the proofs are presented when the index data item is ewea-aa associated with a named nhjWt. 

57. (Currently Amended) The method of claim 56 wherein, when transmitting a the 
composite data-item, the client uses fingerprints to avoid retransrxritting components following 
loss of communication. 
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58. (Original) The method of claim 57 wherein the index data-item is encrypted with a 
key that is only made available to the repository at the moment of access. 

59. (Original) The method of claim 55 wherein an email message is broken up into 
component items in such a manner that the individual attachments are separate component data- 
items. 

60. (Currently Amended) The method of claim 15 wherein the data repository comprises 
the database and the physical locations at whic h -ffl formation about the named-objecte is stored is 

i are based on the access identifiers, to introduce reproducible pseudorandomness into the physical 
locations of the named-object date, 

61. (Canceled). 

62. (Currently Amended) The method of claim 1 wherein an access identifier is formed 
to provide proof of ownership of the deposited data item stor e d in tho ropoaitory, - and the access 
identifier is formed by producing a one-way hash including item-identifying infonnation chosen 
by the depositing client program to identify the data item, and tho ono way hash cannot be 
rev e rood to permit tho repository to dioc o v o r th o identity of th e client program or ucor , 

? 63. (Previously Presented) The method of claim 62 wherein the item-identifying 

information is associated with the client. 

64. (Original) The method of claim 63 wherein the item-identifying information is 
derived at least in part from the path name of the data item on the client 

i 65 . (Original) The method of claim 62 wherein user-identifying information is provided 

to the repository as part of the access-authorization credential. 
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66. (Currently Amended) The method of claim &l wherein at least some of a plurality 
of access-authorization credentials can be transferred between usere retrieving clients without &e 
gfle-ef comimmi^arinp; with the repository. 

J 

67. (Currently Amended) The method of claim 6$ 1 wherein at least some of a plurality 
of ono class of mors is not pormittod to transfer qococs using access-authorization credentials can 
only be used bv retrie ving client programs associated with a single user. 

68-153. (Canceled). 

154. (Currently Amended) The method of claim 1 wherein the depositing further 
comprismges encrypting the deposited data item using a key derived from the content of the 
deposited data item, 

155. (Currently Amended) The method of claim 1, 9, 10, 44? 22, 33, 36, 47, 48 or 62 
further comprising encrypting the deposited data item using a key derived from the content of the 
data item, 

156. (Currently Amended) The method of claim 1 wherein the deposited data items are is 
all or a portion of a widely circulated non- electronic media medium such as a books or musical 
recording, and the method further comprises 

converting the widely circulated non-electronic media medium to a standardized 
electronic version; 

storing the standardized electronic veipion as a data item in the data repository; 

promoting the availability of providing access to the standardized electronic version to 
data repository users wife who have the legalright to have access, whereby the likelihood of the 
data repository storing multiple, slightly-different electronic versions of the non-electronic media 
medium is reduced. 
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1 57. (Previously Presented) The method of claim 48 wherein the aforesaid steps of the 
method provide a mirroring capability for a personal computer, and rrdrroring software with 
instructions for carrying out the aforesaid steps is preconfigured on the personal computer upon 
purchase. 

158. (Previously Presented) The method of claim 48 wherein the aforesaid steps of the 
method provide a mirroring capability for a personal computer, and rrdrroring software for 
carrying out the method is initially configured to mirror essentially all data on the user's 
computer, 

159. (Previously Presented) The method of claim 48 wherein the aforesaid steps of the 
method provide a rnirroring capability for a wireless network device. 

160-174. (Canceled). 

175. (Previously Presented) The method of claim 1 in which different physical locations 
comprise different hard disk drives. 

176. (Previously Presented) The method of claim 1 in which different physical locations 
comprise different data servers. 

177. (Previously Presented) The method of claim 1 wherein the physical locations each 
comprise one or more different processors. 

178. (Previously Presented) The method of claim 1 wherein the physical locations 
comprise physical storage nodes linked by a network. 



PAGE 15/19 * RCVD AT 7/31/2006 10:35:45 AM [Eastern Daylight Time] * SVR:USPTO-EFXRF-2/10 * DNIS:2734040 * CSID: 6 1 75428906 1 DURATION (mm-ss):05-08 



JUL 31. 2006 10:44AM (3) FISH & RICHARDSON 6175428906 NO. 2325 P. 16 

Applicant : Nonnan Margolus et al, Attorney's Docket No.: 11656-002001 

Serial No. : 09/785,535 

Filed : February 16, 2001 

Page : 15 of 18 



179. (Previously Presented) The method of claim 1 wherein determining from the d igital 
fingerprint comparing of digital fi n gerprints, without comparing the entire contents of the 
deposited data item to the entire content s of a data item already stored, whether a stored data 
item is identical to the s e cond deposited data item is already ctorod in tho data ropocitory 
comprises transmitting over the network the digital fingerprint of the s e cond deposited data item 
rather than the second deposited data item itself, 

180. (Currently Amended) The method of claim 1 wherein there is a first depositing 
client program and a sec ond depositing client program and the first and second client programs 
are independent programs. 

181. (Previously Presented) The method of claim 180 wherein the independent programs 
are running on separate computers. 

* 

t 1 82. (Currently Amended) The method of claim 1 wherein there is a first depositing 

client program and a se cond depositing client program and the first and second client programs 
are the same program running at different times. 

1 83. (Currently Amended) The method of claim 1 wherein at loact tho firot the depositing 
client program comprises a file server. 

1S4. (Previously Presented) The method of claim 1 wherein files and directories are 
named objects within the data repository. 

185. (Previously Presented) The method of claim 1 wherein a structured item is split up 
into a plurality of data items with the divisions occurring at content dependent boundaries, 
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186. (Previously Presented) The method of claim 185 wherein the structured data item 
comprises an e-mail message and the content dependent boundaries are the divisions between 
email attachments. 

1 87. (Currently Amended) The method of claim 1 wherein a plurality of depositing 
clients programs each of which has initiatod a prooooc to deposit anidontioal the deposited data 
item ^ a corresponding plurality of retrieval client pmfimm. all share read access to asingfo 
repository the stored data-item. 

188. (Currently Amended) The method of claim 1 87 wherein retrieval clients programs 
which bave not "ritiatod i Procooa for d e biting th o idontical data it w a do not possess an access 
authorization credential generated duri ng deposit of the deposited data item cannot r**A th» 
stored d ata item. 

189. (Currently Amended) The method of claim 187 wherein a reference count that 
reflects the number of times the data item has been associated with named objects cliontc that 
shore road aoooco to tho oingl e r e poDitory data itom has transitioned to zero and the storage space 
associated with the oharod ropooitory stored data-item is reclaimed. 

190. (New) The method of claim 1 wherein the data repository comprises the database. 

191. (New) The method of claim 1 wherein the depositing client program and the 
retrieving client program are the same program. 

192. (New) The method of claim 1 wherein the depositing client program deposits the 
deposited data item twice and the deposited data item is associated with two distinct named 
objects. 
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193. (New) The method of claim 1 wherein a group of data items are stored in the data 
repository and the entire group is associated with the stored named object 

194. (New) The method of claim 1 wherein there exists a defined protocol used by data 
repository client programs to communicate with the data repository and the defined protocol 
allows data repository clients to deposit data items without storing them if they are already stored 
in the data repository and only allows data repository clients to retrieve data items indirectly, by 
using access authorization credentials to select named objects. 
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